sharang/compliance-scanner-agent
1
0
Fork 0
Code Issues 79 Pull Requests 1 Actions Packages Projects Releases 1 Wiki Activity

CS-A1 · Syft/Trivy runner → CycloneDX SBOM #98

New Issue
Open
opened 2026-07-03 08:03:56 +00:00 by sharang · 0 comments
sharang commented 2026-07-03 08:03:56 +00:00
Owner
Copy Link
Copy Source

Epic: A — SBOM pipeline
Crate: compliance-agent · Effort: 2d · Mode: Automated · Depends: —

Subprocess wrapper in the agent for Syft/Trivy. Given a repo or image path, produce a CycloneDX SBOM and store it in Mongo (sboms collection), keyed by asset + tenant.

Epic acceptance: upload a repo or firmware image → CycloneDX SBOM stored per asset+tenant, rendered in dashboard.

**Epic:** A — SBOM pipeline **Crate:** compliance-agent · **Effort:** 2d · **Mode:** Automated · **Depends:** — Subprocess wrapper in the agent for Syft/Trivy. Given a repo or image path, produce a CycloneDX SBOM and store it in Mongo (`sboms` collection), keyed by asset + tenant. **Epic acceptance:** upload a repo or firmware image → CycloneDX SBOM stored per asset+tenant, rendered in dashboard.
sharang added this to the P0 Demo milestone 2026-07-03 08:03:56 +00:00
sharang added the P0-demo label 2026-07-03 08:03:56 +00:00
sharang added a new dependency 2026-07-03 08:09:53 +00:00
#99 CS-A2 · Firmware ingest (EMBA + cve-bin-tool + binwalk)
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
P0-demo
CERTifAI P0 demo build tickets (CS-*)
 bug
critical
enhancement
epic
Tracking issue spanning multiple sub-issues
 high
infrastructure
onboarding
Multi-target onboarding wizard redesign
 performance
security
v0.3.0
No labels P0-demo
Milestone
No items
No Milestone P0 Demo
Projects
Clear projects
No projects
Assignees
Clear assignees
Benjamin_Boenisch sharang (Sharang Parnerkar)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Blocks
#99 CS-A2 · Firmware ingest (EMBA + cve-bin-tool + binwalk)
sharang/compliance-scanner-agent
Reference: sharang/compliance-scanner-agent#98